Senior Associate, Security Operations

Andersen; Los Angeles (CA); On-site; USD 115,000 - 130,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

401(k) plan

160 hours paid time off annually

Twelve paid holidays

Job summary

Andersen is looking for a Senior Associate in Security Operations, based in Los Angeles, CA. This crucial role involves managing day-to-day security operations, vendor relationships, and incident response coordination. Candidates should have over 5 years of experience in security operations with a relevant degree. The position offers a competitive salary range of $115,000–$130,000, along with a comprehensive benefits package including medical coverage and paid time off.

Qualifications

• 5+ years of experience in security operations or incident response.
• Experience with client security due diligence and questionnaire responses.
• Technical fluency in endpoint security and log analysis.

Responsibilities

• Serve as the internal incident response coordinator.
• Execute and improve incident response playbooks.
• Manage relationships with security vendors.

Skills

Security operations

Incident response

Vendor management

Threat detection

Strong written communication

Education

Bachelor’s degree in Information Security, Computer Science, or related field

Tools

SIEM

EDR

Ticketing platforms

Job description

Senior Associate, Security Operations

Andersen’s information security function is expanding, and this role sits at the operational core of that effort. The Senior Associate, Security Operations serves as the firm’s internal hub for day‑to‑day security operations, owning the relationship with our managed detection and response provider, triaging and coordinating incident response, managing security vendor relationships, and executing client security due diligence. This role requires a candidate who is equally comfortable analyzing a threat escalation and drafting a vendor risk assessment.

Senior Associate reports to the Head of Security Engineering & Architecture, with dotted‑line accountability to the Senior Manager, Governance, Risk & Compliance for client diligence and vendor risk. After‑hours availability is a firm requirement.

Responsibilities

• Serve as the firm’s internal incident response coordinator, working alongside the managed detection and response provider during active security events
• Execute, test, and continuously improve IR playbooks through regular tabletop exercises and lessons learned
• Coordinate internal stakeholder communication during incidents and produce post‑incident reports for technical and executive audiences
• Serve as the primary liaison to the firm’s MDR provider, review threat reports, and hold the provider accountable to SLAs
• Triage MDR escalations, assess severity, and initiate appropriate internal response workflows
• Coordinate detection rule tuning and alert threshold adjustments to reduce false positives
• Maintain knowledge of MDR detection logic and flag coverage gaps to the Head of Security Engineering & Architecture
• Execute responses to client security questionnaires and due diligence requests accurately and on time
• Ensure questionnaire responses reflect the firm’s control posture and certifications, escalating discrepancies immediately
• Manage intake and tracking of diligence requests, flagging new questions to the Senior Manager, GRC
• Support the Head of Security Engineering & Architecture with vulnerability management and remediation follow‑up
• Manage relationships with security technology and service vendors, tracking contract terms, renewal dates, and SLA performance
• Partner with the Senior Manager, GRC on vendor risk assessments and track findings to remediation
• Maintain operational documentation including runbooks, contact trees, and escalation procedures
• Contribute to security awareness initiatives and serve as a resource for internal teams
• Identify and assess AI‑related security risks, incorporate AI threat scenarios into tabletop exercises, and monitor use of unsanctioned AI tools

Requirements

• 5+ years of experience in security operations, incident response, or closely related discipline
• Bachelor’s degree in Information Security, Computer Science, or related field
• Experience triaging and coordinating incident response during active events
• Ability to execute, test, and improve IR playbooks
• Working familiarity with managed detection and response services
• Experience managing vendor relationships and SLA oversight
• Experience with client security due diligence and questionnaire responses
• Technical fluency in endpoint security, network fundamentals, log analysis, and threat detection
• Proficiency with SIEM, EDR, and ticketing platforms
• Knowledge of AI‑enabled threat vectors
• Strong written communication skills for incident reports and client responses
• Availability to respond to high‑severity incidents outside business hours

Preferred

• Relevant incident handling or security analysis certification (e.g., GCIH, GSEC, GSOC)
• Background in professional services or consulting
• Familiarity with SOC 2 or ISO 27001 control environments
• Exposure to threat intelligence platforms or processes
• Knowledge of AI security risk frameworks such as NIST AI RMF or MITRE ATLAS

Compensation And Benefits

Competitive base compensation, benefits package, and discretionary bonuses based on performance. Expected salary range for U.S. employees: $115,000–$130,000. Benefits include medical, dental, vision, basic life insurance, 401(k) plan, 160 hours paid time off annually, and twelve paid holidays.

Equal Opportunity

Andersen Tax welcomes and encourages workforce diversity. We are an equal opportunity employer. Applicants and employees are considered for positions and are evaluated without regard to race, color, national origin, ancestry, religion, sexual orientation, gender identity, sex, age, marital status, military status, veteran status, genetic information, or any other characteristic protected by law. All qualified individuals, including those with criminal histories, will be considered in a manner consistent with applicable law. We provide reasonable accommodations to qualified individuals with disabilities.